docs: def verify_manifest_main_checksum(self, manifest):
          """
          Verify the checksum over the manifest main section.
  
          :return: True if the signature over main section verifies
          """
  
          # NOTE: JAR spec does not state whether there can be >1 digest used,
          # and should the validator require any or all digests to match.
          # We allow mismatching digests and require just one to be correct.
          # We see no security risk: it is the signer of the .SF file
          # who shall check, what is being signed.
          for java_digest in self.keys_with_suffix("-Digest-Manifest"):
              whole_mf_digest = b64_encoded_digest(
                  manifest.get_data(),
                  _get_digest(java_digest))
  
              # It is enough for at least one digest to be correct
              if whole_mf_digest == self.get(java_digest + "-Digest-Manifest"):
                  return True
  
          return False